Dyfed-Powys Police cyberattack investigators are assessing whether employee information was accessed after an incident that disrupted some of the Welsh force’s non-emergency systems. The force said it found no evidence that information belonging to members of the public was affected.
Dyfed-Powys Police identified the incident earlier this month, according to a statement reported by The Record. The force covers southwest Wales and has more than 2,000 officers and staff.
The available facts remain narrow. Police have not said how an attacker got into its systems, which non-emergency services were disrupted, or what categories or volume of employee data may be involved. They have also not confirmed that staff information was taken or compromised.
What is known about the Dyfed-Powys Police cyberattack?
The force has confirmed operational disruption to some non-emergency systems and an ongoing inquiry into possible exposure of employee information. Its statement separates that unresolved staff-data question from public information: investigators have found no evidence so far that members of the public were affected.
That distinction matters. A cyberattack can interrupt systems without proving that records were copied or accessed. In this case, Dyfed-Powys Police has not disclosed enough technical detail to establish either the route of intrusion or the scope of any data exposure.
Tarian, the regional organised-crime unit for southern Wales, is leading the investigation with support from cybersecurity specialists, The Record reported. Police said they were taking steps to protect their information and systems and would provide further updates when available.
What has not been confirmed
- Whether any staff data was accessed, copied or otherwise compromised.
- What information, if any, may concern employees.
- How the intrusion occurred.
- Which non-emergency systems were affected and for how long.
- Who carried out the attack. No group had claimed responsibility when The Record published its report.
For now, the incident should be understood as a confirmed attack with limited reported service disruption and an unresolved question over staff data, rather than a confirmed breach of a defined set of records. The force has not reported evidence that public information was affected.
This story draws on original reporting from The Record.
